Director, Security Governance & Assurance

NETS; Singapore; On-site; SGD 180,000 - 300,000; Full time

Benefits offered by this job

Performance bonus

Job summary

BCS, a wholly owned subsidiary of NETS, manages and operates Singapore's payment infrastructure, ensuring security, availability and resilience in line with regulatory requirements.

The Security Governance and Assurance (SGA) lead will head a team of GRC specialists, drive cybersecurity governance, risk assessments, audits, and policy enforcement, reporting to the CISO. The role demands extensive experience and strategic leadership across security disciplines.

Qualifications

• Bachelor’s or Master’s in Computer Science, Computer Engineering, Information Security, or related fields.
• Minimum of 10 years in IT governance, risk, or compliance management, preferably within financial services or payment systems.

Responsibilities

• Design, implement, and continually update cybersecurity policies, standards, guidelines, and processes.
• Recruit, train, and retain security governance, risk and compliance specialists.
• Identify automation and process improvements to optimise security monitoring and risk management.
• Assist the CISO with budgeting, procurement, and resource allocation.
• Conduct risk assessments to monitor compliance with policies and controls.
• Oversee audits and remediation efforts, supporting informed decision-making.
• Develop and report IT Security metrics and KRIs for risk committees.

Skills

Cybersecurity frameworks

Security governance

Leadership

Stakeholder management

Regulatory compliance

Communication skills

DevSecOps

Education

Bachelor’s or Master’s in Computer Science/Engineering/Information Security

Tools

COBIT

ITIL

MAS Notices

PDPA / Personal Data Protection

Job description

BCS, a wholly owned subsidiary of NETS, manages and operates Singapore's payment infrastructure, ensuring security, availability and resilience in line with regulatory requirements.

The Security Governance and Assurance (SGA) lead will head a team of GRC specialists, drive cybersecurity governance, risk assessments, audits, and policy enforcement, reporting to the CISO. The role demands extensive experience and strategic leadership across security disciplines.